Cloud security without SIEM overhead

Cloud anomaly detection for small dev teams and businesses

Flare turns cloud and SaaS audit activity into ranked, explained findings. GCP, AWS and Google Workspace are available today. GitHub Enterprise Cloud uses a separate deterministic report with exact source IDs.

Get started Explore the demo

Find cloud activity worth investigating

Flare is designed for teams that need useful cloud-audit answers without operating a general-purpose log platform.

Security monitoring for small businesses Security vs cost anomaly detection

Connect read-only

Use OAuth for GCP Cloud Audit Logs or a customer-created IAM role for recent regional AWS CloudTrail management events.

Review ranked findings

Flare assesses current-window evidence with available historical context, then ranks findings by severity with a plain-English explanation.

Investigate the evidence

Inspect selected source-event excerpts and ask follow-up questions using the retained analysis results and supporting evidence.

Cloud and SaaS audit activity

Google Cloud

Admin Activity, System Event, and Policy Denied logs, with Data Access available when it is enabled and separately authorized.

Explore GCP Audit Log anomaly detection →Review GCP access requirements →

Amazon Web Services

Recent regional CloudTrail management-event history through a read-only IAM role with a connector-specific ExternalId.

Explore AWS CloudTrail anomaly detection →Review AWS access requirements →

Google Workspace · Early access

Login, administrator and OAuth-token audit activities for one verified customer. Read-only access and manual analysis; no message or file content.

Explore Workspace coverage and setup →

GitHub Enterprise Cloud · Early access

Read-only organization web audit reports with deterministic findings and exact source IDs. A saved 30-day retrospective starts when you connect, with manual checks available afterward. Each 24-hour interval fetches up to three pages or 300 web events, with partial coverage marked. Reviews are kept for 90 days. Git operations and repository contents are excluded.

Learn about GitHub audit logs →

Start with real evidence

See what changed in your cloud.

Connect read-only or upload a focused JSON, NDJSON, CSV, or plain-text log file. Early access includes up to 10 analyses per day with no credit card required.

Get started